Overview

overview

10

Static

static

7

bc2c73c8b0...cs.exe

windows7-x64

10

bc2c73c8b0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc2c73c8b0952aaab0877eae3d13c1e0_NeikiAnalytics

  • Size

    21KB

  • Sample

    240515-lkfetsbc91

  • MD5

    bc2c73c8b0952aaab0877eae3d13c1e0

  • SHA1

    48b9fbc18b4d50fc36e4c56950462188aa5bfbb1

  • SHA256

    37ac74b64c013c339d50e4bff766793ce0c13cc84ad5a0055f8a5ff59e94216d

  • SHA512

    6e3ba0cb87a95b276ff1410ccc66dba26a7aa28d5413f8e3ee959b381e26501d03e0032b3eed124e75a6c4a0136b715bc217441be67d4c84aab5958d18dcf017

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXVB7ZDT+S:rRkiLw3HsDSARGG/rZP+S

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      bc2c73c8b0952aaab0877eae3d13c1e0_NeikiAnalytics

    • Size

      21KB

    • MD5

      bc2c73c8b0952aaab0877eae3d13c1e0

    • SHA1

      48b9fbc18b4d50fc36e4c56950462188aa5bfbb1

    • SHA256

      37ac74b64c013c339d50e4bff766793ce0c13cc84ad5a0055f8a5ff59e94216d

    • SHA512

      6e3ba0cb87a95b276ff1410ccc66dba26a7aa28d5413f8e3ee959b381e26501d03e0032b3eed124e75a6c4a0136b715bc217441be67d4c84aab5958d18dcf017

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXVB7ZDT+S:rRkiLw3HsDSARGG/rZP+S

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks